Application Security and Secure Development topics
10 short topics in Application Security and Secure Development. Each one is a single focused exercise with a clear piece of evidence at the end.
10 topics, one exercise each.
Work through them in order, or jump to the one you need.
These are draft topic outlines (draft; instructor review pending). Full lessons follow after review; ask Ajay if you need a topic sooner.
- 01
Threat modeling
Use local or synthetic evidence to investigate Threat modeling in the context of Hardened file upload and access workflow; explain the observation and next action.
Open micro-course → - 02
Untrusted input and injection prevention
Use local or synthetic evidence to investigate Untrusted input and injection prevention in the context of Hardened file upload and access workflow; explain the observation and next action.
Open micro-course → - 03
Cross-site scripting prevention
Use local or synthetic evidence to investigate Cross-site scripting prevention in the context of Hardened file upload and access workflow; explain the observation and next action.
Open micro-course → - 04
Request forgery defenses
Use local or synthetic evidence to investigate Request forgery defenses in the context of Hardened file upload and access workflow; explain the observation and next action.
Open micro-course → - 05
Security configuration review
Use local or synthetic evidence to investigate Security configuration review in the context of Hardened file upload and access workflow; explain the observation and next action.
Open micro-course → - 06
Secret lifecycle management
Use local or synthetic evidence to investigate Secret lifecycle management in the context of Hardened file upload and access workflow; explain the observation and next action.
Open micro-course → - 07
Encryption and key management
Use local or synthetic evidence to investigate Encryption and key management in the context of Hardened file upload and access workflow; explain the observation and next action.
Open micro-course → - 08
Dependency and supply-chain risk
Use local or synthetic evidence to investigate Dependency and supply-chain risk in the context of Hardened file upload and access workflow; explain the observation and next action.
Open micro-course → - 09
Secure failure and exception handling
Use local or synthetic evidence to investigate Secure failure and exception handling in the context of Hardened file upload and access workflow; explain the observation and next action.
Open micro-course → - 10
Security regression testing
Use local or synthetic evidence to investigate Security regression testing in the context of Hardened file upload and access workflow; explain the observation and next action.
Open micro-course →
More in Core IT concepts.
You have the curiosity.
Let’s turn it into capability.
Start with a practical workshop or bring a specific question to Ajay.